$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: wmmThCuULXF235w2j2c6QnCY+15ah099cU4WdhH7srg= Subject key identifier: CC:A9:22:B3:FE:70:DA:54:1B:1B:92:9C:55:3A:B6:BA:B0:45:81:E3 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 147A3500A99F5D6F8F4C8E3FF419AC4E0B629D0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 01CF Signing time: Thu 07 Aug 2025 03:51:45 +0000 Manifest this update: Thu 07 Aug 2025 03:46:45 +0000 Manifest next update: Sun 10 Aug 2025 07:42:45 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: 2LNQiClFSEhZ63TtYs9aOYkme5UXddA0bnhqfUUmQo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7a:35:00:a9:9f:5d:6f:8f:4c:8e:3f:f4:19:ac:4e:0b:62:9d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Aug 7 03:46:45 2025 GMT Not After : Aug 10 07:42:45 2025 GMT Subject: CN=CCA922B3FE70DA541B1B929C553AB6BAB04581E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:d9:d7:a7:05:6b:d8:7b:55:8c:09:fb:6a: 6c:74:05:b2:14:eb:27:84:f0:5e:4a:32:a8:7a:d3: 4a:1c:b9:6e:ff:c8:e8:4d:c0:4e:4e:23:3c:71:a1: 55:69:d2:c4:5e:80:24:61:a0:f1:8d:7a:a9:14:53: 3d:6f:d3:47:d1:ce:ae:1c:72:36:db:16:6f:82:9b: d2:78:af:26:45:03:be:8d:56:5c:41:68:be:c7:7c: 93:d8:1f:7f:d5:dc:49:c4:3b:78:83:7c:95:5b:71: 00:ba:cc:47:cc:72:a0:ce:9c:fb:7b:46:e9:4f:83: d2:fa:2f:b8:1e:e6:b8:d0:5f:bc:37:cc:b2:58:6d: c5:55:45:0a:b8:8a:bd:b0:c8:a2:59:ff:48:df:1b: 6b:55:6b:de:a6:de:62:42:f4:57:a2:ff:d8:73:dd: a5:0e:36:b3:4a:1f:66:58:ca:95:ed:ca:d0:e9:fa: 7b:7a:06:82:42:d6:9d:1b:80:33:07:9e:b9:f3:45: 01:dd:2a:92:52:78:b4:15:86:75:20:6e:c3:8e:24: 7d:e6:8f:b3:ff:02:b6:74:41:4c:33:63:37:ac:3e: 32:d9:7b:8a:0a:a7:a1:0c:0e:7c:fc:64:ae:c1:19: 38:72:14:87:74:73:c8:20:36:5e:bc:a8:c7:67:76: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A9:22:B3:FE:70:DA:54:1B:1B:92:9C:55:3A:B6:BA:B0:45:81:E3 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:8c:3f:8f:27:90:4f:8d:7d:8c:be:07:a1:40:5e:58:79: 01:27:f1:6d:0f:4a:ce:e0:b7:a8:30:8b:79:79:8a:f2:62:c4: 5f:0d:dd:be:75:73:be:80:cc:94:f8:df:c9:b9:bc:03:cc:2f: ff:52:e6:a5:10:ce:c6:02:a8:c4:c1:2c:b4:1d:ad:8e:64:cc: 34:1f:42:45:f3:0d:a2:74:0c:09:a9:75:35:0c:95:7a:b3:40: cb:67:4a:d1:5f:bb:96:15:ba:83:6b:13:cb:de:8c:f8:8d:00: e9:a5:41:29:01:16:70:5b:db:a7:96:90:77:44:ea:ca:46:a5: b3:41:83:7a:a5:d8:96:d2:14:8a:1f:6a:ce:b0:ff:e4:2a:a5: 82:f6:13:a4:17:4b:d3:ca:aa:4c:3e:2a:da:0b:49:e7:fb:2d: 1c:8f:a2:bb:24:b3:77:59:b6:a0:b5:1b:b2:1e:b3:03:c2:71: 95:70:b6:fd:82:1c:9a:6a:04:f6:e2:5d:e0:44:62:d7:08:68: f3:f0:bd:97:8e:a9:bc:d3:f7:4e:05:e5:51:b8:b2:73:81:51: 79:bd:94:11:0f:36:7c:d3:da:3d:55:42:e7:d3:fc:23:93:21: f1:e3:1d:f1:4b:e0:ca:42:76:77:6f:47:49:6f:0c:57:48:af: c9:35:88:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHo1AKmfXW+PTI4/9BmsTgtinQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNTA4MDcwMzQ2NDVaFw0yNTA4MTAwNzQyNDVaMDMxMTAvBgNV BAMTKENDQTkyMkIzRkU3MERBNTQxQjFCOTI5QzU1M0FCNkJBQjA0NTgxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UNnXpwVr2HtVjAn7amx0BbIU 6yeE8F5KMqh600ocuW7/yOhNwE5OIzxxoVVp0sRegCRhoPGNeqkUUz1v00fRzq4c cjbbFm+Cm9J4ryZFA76NVlxBaL7HfJPYH3/V3EnEO3iDfJVbcQC6zEfMcqDOnPt7 RulPg9L6L7ge5rjQX7w3zLJYbcVVRQq4ir2wyKJZ/0jfG2tVa96m3mJC9Fei/9hz 3aUONrNKH2ZYypXtytDp+nt6BoJC1p0bgDMHnrnzRQHdKpJSeLQVhnUgbsOOJH3m j7P/ArZ0QUwzYzesPjLZe4oKp6EMDnz8ZK7BGThyFId0c8ggNl68qMdndmGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKkis/5w2lQbG5KcVTq2urBFgeMwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAejD+PJ5BPjX2MvgehQF5YeQEn8W0PSs7g t6gwi3l5ivJixF8N3b51c76AzJT438m5vAPML/9S5qUQzsYCqMTBLLQdrY5kzDQf QkXzDaJ0DAmpdTUMlXqzQMtnStFfu5YVuoNrE8vejPiNAOmlQSkBFnBb26eWkHdE 6spGpbNBg3ql2JbSFIofas6w/+QqpYL2E6QXS9PKqkw+KtoLSef7LRyPorsks3dZ tqC1G7IeswPCcZVwtv2CHJpqBPbiXeBEYtcIaPPwvZeOqbzT904F5VG4snOBUXm9 lBEPNnzT2j1VQufT/COTIfHjHfFL4MpCdndvR0lvDFdIr8k1iHg= -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:28 2025 by rpki-client